Risk Methodologies And Analysis

 

In order to successfully manage risk, one must understand risk itself and the assets at risk. The way one goes about managing risk will depend on what needs to be protected, and from what to protect it.

Instructions
Write a 3–4 page paper in which you:

Discuss at least three rationales for performing an information systems security risk assessment.
Explain the differences in quantitative, qualitative, and hybrid information systems risk assessment and illustrate the conditions under which each type is most applicable.
Describe the type of information that is collected to perform an effective information systems security risk assessment. Include at least three different types. Fully describe each and justify why you made your selections.
Describe at least five common tasks that should be performed in an information systems security risk assessment.

Sample Solution

Risk Methodologies And Analysis

Although regulations do not instruct organizations on how to control or secure their systems, they do require that those systems be secure in some way and that the organization prove to independent auditors that their security and control infrastructure is in place and operating effectively. The enterprise risk assessment methodology has become an established approach to identifying and managing systemic risk for an organization. Some areas of rationale for performing an enterprise security assessment include: cost justification – added security usually involves additional expense; productivity – enterprise security risk assessments should improve the productivity of IT operations, security and audit.

quicker. For short and simple tasks this is an extremely effective way of organising groups, due to the increased short term productivity. However there are significant issues with grouping individuals in this manner, particularly when tasks become more complex, and ultimately the model should mainly be used for monitoring the progress of groups (Pettinger, 2007). Figure 3: Belbin’s Team Roles (PrePearl Training Development, 2019) A more functional approach of grouping individuals is to utilise Belbin’s Team Theory (Belbin, 2017). Belbin identifies 9 key roles that must be fulfilled within a group to ensure success, the roles are summarised in Figure 3. The roles cover a wide spectrum of skills that need to be present within a group to ensure success, and becomes essential when tasks are lengthy and complex. Organisations can find the Belbin roles each individual fits through a questionnaire, and thus balanced groups can be formed covering all the roles. However, like with Fiedler’s contingency model, the theory when translated to practice can often become very impractical for organisations to implement regularly. This is largely because the organisation is constrained by the personalities of their employees, their may be an abundance of one personality type and an absence of another, the only solution is to hire externally to fill the missing roles within teams. This can result in an extensive payroll for an organisation and huge financial implications as they cannot legally dismiss employee’s if they have too many of one personality type. The importance of Belbin roles in a team became apparent for Group 1 on the first day of the outdoor management course, the group had 5 people who filled the completer finisher and implementor roles, however had no-one filling the resource investigator or monitor evaluator role, the group ran out of time and did not complete the task successfully. Obviously running out of time was not the sole cause of the groups failure, however if someone had been monitoring time and performance then the group may have realised their option was unfeasible and could have found an alternative solution. One solution for lack of Belbin roles is to assign specific roles to individuals, this was implemented heavily on the outdoor management course for roles perceived to be essential for success such as time keeping. This method works for simple tasks, however for complex tasks the individual with the assigned responsibility can often become engrossed in the task and forget their role, or the opposite becoming too engrossed with the responsibility they have been assigned. Ultimately, like with leadership ensuring teams are functioning properly is highly dependent on the situation, and becomes the leaders responsibility to analyse the situation and correctly organise groups to ensure success.

This question has been answered.

Get Answer
WeCreativez WhatsApp Support
Our customer support team is here to answer your questions. Ask us anything!
👋 Hi, Welcome to Compliant Papers.